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EVIL PRIMES AND SUPERSPECIAL MODULI 


EYAL Z. GOREN & KRISTIN E. LAUTER 


Abstract. For a quartic primitive CM field K, we say that a rational prime p is evil if at least one of the 
abelian varieties with CM by K reduces modulo a prime ideal p|p to a product of supersingular elliptic 
curves with the product polarization. We call such primes evil primes for K. In [GL], we showed that for 
fixed K, such primes are bounded by a quantity related to the discriminant of the field K. In this paper, 
we show that evil primes are ubiquitous in the sense that, for any rational prime p, there are an infinite 
number of fields K for which p is evil for K. The proof consists of two parts: (1) showing the surjectivity 
of the abelian varieties with CM by K, for K satisfying some conditions, onto the the superspecial points 
modulo p of the Hilbert modular variety associated to the intermediate real quadratic field of K, and (2) 
showing the surjectivity of the superspecial points modulo p of the Hilbert modular variety associated to 
a large enough real quadratic field onto the superspecial points modulo p with principal polarization on 
the Siegel moduli space. 


1. Introduction 

Given a primitive quartic CM field, K , one can study the values at CM points associated to K of certain 
Siegel modular functions studied by Igusa. Their values are algebraic numbers which generate unramified 
abelian extensions of the reflex field of K. When computing their minimal polynomials over Q, rational 
primes in the denominators of the coefficients correspond to primes where at least one of the abelian 
varieties with CM by K reduces to a product of supersingular elliptic curves with the product polarization. 
We call such primes evil primes for K. Such primes were studied in [GL], where we showed that for fixed K, 
such primes are bounded by a quantity related to the discriminant of the field K. So in some sense, there 
are few evil primes, since if we fix K with small discriminant, then there are a small number of evil primes 
for K. In this paper, we show that evil primes are ubiquitous in the sense that, for any finite set S of 
rational primes, there are an infinite number of fields K for which every prime p € S is evil for K (this 
requires the existence of infinitely many real quadratic fields of strict class number one, but we expect 
that this condition can be removed). The presence of evil primes appears as an obstruction for the class 
invariants defined in [DSG] to be units (see also [GL]). 

The proof is divided into two parts, corresponding to the two main theorems of the paper, Theorem A 
and Theorem B. Let L be a totally real number field of strict class number one. In Theorem A we prove 
that there is a choice of CM field K such that all the superspecial points in characteristic p on the Hilbert 
modular variety associated to L arise as the reduction of an abelian variety with CM by I\. Necessary and 
sufficient conditions on the field K are: K + = L, p is unramified in K and satisfies conditions ensuring that 
any abelian variety with CM by Ok has superspecial reduction, and the relative discriminant Norm(d/f/i) 
is large enough. 

Theorem A generalizes recent work of Elkies, Ono and Yang [EOY], where they study the elliptic curve 
case corresponding to an imaginary quadratic field K. In Theorem 1.2 of [EOY], they prove that for an 
odd prime p and an imaginary quadratic field K in which p is inert, (any power of) the supersingular 
polynomial modulo p divides the Hilbert class polynomial of K modulo p if the discriminant of K is 
large enough. In other words, any supersingular elliptic curve modulo p is the reduction of an elliptic 
curve with CM by K for any K satisfying the above conditions. Whereas Theorem 1.2 of [EOY] uses 
deep results of Duke [D], Iwaniec [I], and Siegel to study the asymptotics of a certain theta function, our 
Theorem A uses the work of Cogdell, Piatetski-Shapiro and Sarnak [Cog] which generalizes Duke’s work 
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to totally real number fields. We prove Theorem A in three steps. Let R be the centralizer of Ol in the 
endomorphism ring of A, a superspecial point on the reduction modulo a prime above p of the Hilbert 
modular variety associated to L. Following [Nic], we call R a superspecial order; it is an order in the 
quaternion algebra B p l := B piOC L, where R Pj0O is the rational quaternion algebra ramified at p and oo 
alone. First we establish a one-to-one correspondence between (D^-embeddings of Ok into the order R up 
to equivalence and CM lifts of A to abelian varieties with CM by K along the lines of what was shown in 
[GL], Next we show that to give an C>L-embedding of Ok into the endomorphism ring of A, it is enough 
that a totally positive generator of the relative discriminant of K/L be represented by the norm form 
on a lattice associated to R. Next we use the theorem on integral representability by positive definite 
integral ternary quadratic forms over totally real fields ([Cog]) to reduce the computation to checking 
local representability. Checking local representability uses that all superspecial orders in the quaternion 
algebra B Pt L are locally conjugate. 

Theorem B concerns the relationship between the superspecial points modulo a prime on the Siegel 
moduli space of principally polarized abelian surfaces and the superspecial points modulo a prime on the 
Hilbert modular variety associated to a real quadratic field L. Specifically, in Theorem B we show that the 
superspecial points modulo a prime on the Hilbert modular variety associated to a real quadratic field L 
surject onto the superspecial points modulo the prime on the Siegel moduli space if the discriminant of L 
is large enough. To prove this theorem we need to show how to embed Ol into the endomorphism ring 
of A, for A any superspecial point with principal polarization, in a way which is compatible with the 
polarization. We accomplish this using the description of all possible polarizations given in [IKO] and the 
fact that locally and rationally all principally polarized abelian varieties are the same. 

Together Theorems A and B imply that for any rational prime p , there are an infinite number of quartic 
CM fields K for which p is evil for K. Moreover, once the discriminants of K and its totally real subfield L 
are large enough, every reducible polarized abelian surface (E\ x E 2 , Ai x A 2 ) arises as the reduction of a 
CM point of K. Strictly speaking, the second statement requires that L have strict class number one. It is 
widely believed that there are infinitely many real quadratic fields of strict class number one, and in any 
case we expect that the strict class number one assumption can be removed. Note that the first statement 
is unconditional, however, since one can easily manufacture a reducible Ol- principally polarized surface 
and then use Theorem A. The analogous statement for any finite collection of primes still requires the 
existence of infinitely many real quadratic fields of strict class number one, since all primes in the set must 
be unramified in the real quadratic field. 

We also remark that Theorems A and B could be of interest for totally different reasons. In [Ghi, 
Nic], one finds an approach to Siegel and Hilbert modular forms through the superspecial locus in the 
corresponding moduli spaces. 

The paper is organized as follows. Section 2 contains precise statements of the results of the paper. 
Section 3 contains the proof of Theorem A and Section 4 contains the proof of Theorem B. 


2. Statement of Results 

All fields are considered as subfields of an algebraic closure Q of Q. Given a CM field K of degree 2 g 
over Q, denote by K) the set of isomorphism classes over Q of abelian varieties (A, A, 1 ), where A is 
an abelian variety of dimension g, A : A —> A v is a principal polarization, t : Ok — > End(A) is a ring 
embedding and the Rosati involution x x x induces on Ok complex conjugation. We denote by K + the 
maximal totally real subfield of K. If K + has strict class number one then the discriminant ideal d K /K+ 
is generated by a totally negative element of K + , uniquely determined up to Ol x ’ 2 (see Lemma 1). We 
shall denote any such generator as — m. 

Theorem A. Let L be a totally real field of degree g and strict class number one. Let p be a rational 
prime, unramified in L, and P a prime of Q above p. Let SA5A(V) denote the superspecial points on the 
reduction modulo P of the Hilbert modular variety associated to L that parameterizes abelian varieties with 
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real multiplication by Ol equipped with an OL-linear principal polarization. There exists a constant N = 
N(p , L ) such that for every CM field if satisfying: 

(1) K+ = L; 

(2) Let p be a prime of L above p and a prime of if above p. 

(a) Ifp ^ 2 then f{f#/p) + f(p/p) is odd for all 93|p|p; 

(b) If p = 2 then 3m is a quadratic residue modulo p 5 for all p| p; 

(3) the discriminant of K over L, dx/L> has norm greater than N in absolute value; 

then the reduction map 

y(K) —> yy{L) 


is surjective. 


Theorem B. Let L be a real quadratic field of strict class number one. Let p be a rational prime. 
Let A = Ah,i denote the moduli space of principally polarized abelian surfaces. Let AASA[AI) denote the 
superspecial points of A (mod p). There exists a constant M = M ( p ) such that if dL > M the map 

S&(L) —► SW{A) 


is surjective. 


Corollary 1. Let L be a real quadratic field of strict class number one and let p be a rational prime 
unramified in L, and suppose that L satisfies dL > M = M(p) from Theorem B. If if is a non-biquadratic 
quartic CM field satisfying conditions (1) - (3) of Theorem A, then every superspecial principally polarized 
abelian variety in characteristic p has a CM lift to an abelian variety with CM by if, i.e., is a reduction 
of a point in jA’(if). 

Definition. Let if be a quartic primitive CM field. We say that a rational prime is “evil” (for if) if 
for some prime P of Q there is an element of S^(K) whose reduction modulo P is the product of two 
supersingular elliptic curves with the product polarization. 


Corollary 2. Let L be a real quadratic field of strict class number one and let p be a rational prime 
unramified in L, and suppose that L satisfies g(l > M = M (p) from Theorem B. Then p is evil for every 
non-biquadratic quartic CM field if satisfying conditions (1) -(3) of Theorem A. 

Remark 1. In Corollaries 1 and 2, the rational prime p can be replaced by a finite set of rational 
primes, all unramified in L. The results of the corollaries then hold for fields if satisfying the conditions 
of Theorem A for all primes in the set simultaneously. In particular, for any finite set of rational primes, 
this gives a field if for which all primes in the set are evil for if. 


3. Proof of Theorem A 

Let L be a totally real number field of degree g over Q and let if be a CM field such that if + = L. We 
assume that L has strict class number one. 


Lemma 1. (1) One can write Ok = ] where t satisfies a quadratic polynomial x 2 + bx + c, 

with b,c £ Ol■ Let —m = b 2 — 4c. Then —m is a totally negative generator of dx/L- We have 

that Vf} IT = Ok -— ■ 

K/L - £V yj — m 

(2) Let A be an abelian variety with real multiplication by Ol such that the Rapoport condition holds 
(cf. [GL]j. Then A has an OL-linear principal polarization which is unique up to automorphism. 

(3) Let <f> be a CM type of if and let a be a fractional ideal in if. The abelian variety C s /$(a) 
carries a principal polarization A such that the Rosati involution associated to it induces complex 
conjugation on if. Moreover, A is unique up to automorphism. 
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Proof. Since Ol has strict class number one, and Ok is a torsion-free C^-module, we may write Ok = 
Ol ® Ol • t. Then t 2 = — c — bt for some 6 , c £ Ol- It follows that the discriminant ideal cLk/l is generated 

by Norm if / i (2 1 + b) = Norm k/l(V~^) = m ([Ser, Ch 3, § 6 , Cor 2]) and that 2 Ok 

deduce equality by comparing the norm to L of these ideals. We conclude Part (1). 

It is proven in [Rap] that A has an (Dj,-linear polarization. Since the polarization module of A is 
a projective C^-module with a notion of positivity, it follows that there is an isomorphism of Ol- 
modules Hornet (A, yl v ) sym = Ol , taking the polarizations to the totally positive elements. Since A 
satisfies the Rapoport condition, it can be lifted as a polarized abelian variety with RM to characteristic 
zero. The characteristic zero uniformization allows us to deduce that the degree of a symmetric homomor¬ 
phism, viewed as an element A £ Ol, is Norm(A) 2 . In particular, principal polarizations exist and are in 
bijection with Ol x,+ ■ 

Now, for any totally real number field L of degree g we have an exact sequence 
1 —► L X /(L X ’+ • O l x ) —- C1 + (L) —♦ C1(L) —♦ 1. 

There is a sign map, sgn : L x —> which is a surjective homomorphism with kernel L x,+ . Thus, 

the cardinality of L x /(L x ' + • Ol x ) is 2 s /|sgn(O i x )|. If we interpret 2 9 as the cardinality of Ol x /Ol x ’ 2 
and |sgn(C , L X )| as the cardinality of Ol x /Ol x ' + we conclude that \Ol x ' + /Ol x ' 2 \ = h\/hL- In particu¬ 
lar, the statement h~/ = 1 is equivalent to the statement that h,L = 1 and Ol x ' + = Ol x ' 2 ■ 

Now let Ai, A 2 be two principal Ol -linear polarizations on the abelian variety with real multiplica¬ 
tion (A, l) . We may identify the \ with totally positive units in Ol and so there is a unit e £ Ol such 
that A 2 = e 2 Ai. That implies that the polarized abelian varieties (A, 1 , Ai) and (A, t, A 2 ) are isomorphic 
via the multiplication by e map. 

Next we address Part (3). It is well known that the polarizations on C s /<I>(a) that induce complex 
conjugation on K arise from bilinear pairings 

E p : a x a —» Z, E p (u, v) = Ttk/q(puv), 

where p £ (T>k/ djaa)^ 1 , p = —p, and Im(</>(/?)) > 0 for all <j> £ d>. The polarization is principal if and only 
if (p) = (T> K/Q aa)~ 1 . 

It follows from Part (1) that V k /l = {V~ m ) and since L has strict class number one we also 
have T>l/i q> = (p) for some totally positive 77 . Since T>k/q = I^k/l'^l/q, we conclude that T>k /Q = {$), 
where S = —5. Again, the strict class number one condition gives that sgn(C ) L X ) = {±1 } 9 and so mod¬ 
ifying 6 by a unit e £ Ol x we can achieve also Im(<^((5)) > 0 for all <f> £ $. Given a fractional ideal a 
of Ok there is an a £ L + such that aa = (a). Letting p = 1/(8 a), we see that C s / ( I > (a) carries a principal 
polarization. Moreover, the element p is unique up to multiplication by elements of Ol x,+ = Ol x and 
the same argument as in Part (2) shows that different choices of p lead to isomorphic polarized abelian 
varieties with CM. □ 

Let A £ 5A5A(L). There is a given embedding l : Ol —* End(A) and a unique up-to-isomorphism C^-linear 
principal polarization for this embedding. The centralizer R of Ol in End(A) is an order of the quaternion 
algebra B p l = B P:OC ®L, where B p oc is the quaternion algebra over Q ramified at p and infinity (cf. [Cha, 
Lemma 6 ]). In particular B p l is ramified at any infinite place of L. It follows that the Rosati involution 
coming from an C>£-polarization fixes R and induces on it the canonical involution x t—> x := Tf(a;) — x. 

The orders R that arise in this way are called superspecial in [Nic]. In his thesis [Nic], Nicole develops 
a theory analogous to Deuring’s theory for supersingular elliptic curves and we refer the reader to that 
reference for a comprehensive picture (see also [GN]). The only fact that we need here is that if (Ai, Li), i = 
1 , 2 , are two superspecial abelian varieties with real multiplication by Ol and Ri = Cent End ( J 4 ^(Ol) 
then R\ and R 2 are everywhere locally conjugate. For completeness we sketch the argument. 

As is well-known, Tate’s theorem for abelian varieties (see for example [WM]) can be simplified for 
supersingular abelian varieties over a finite field of characteristic p and written as 

(3.1) Hom(A 1 , A 2 ) ® r L(. = Horn (Te(Ai) ,Ti(A 2 )) , Horn (Ai,A 2 ) ®Z p = Hom(D(A 1 ), D(A 2 )), 
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where O(Aj) is the co-variant Dieudonne module of Ai (the Horn’s are over F p ). It is not hard to see that 

if Ai have RM by Ol then we get 

(3.2) 

Hom 0j ,(Ai, A 2 ) = Rom OL {T i (A 1 ) : Te(A 2 )), Hom 0l (Hi, A 2 ) ®% p = Hom 0i (D(Ai), D(A 2 )). 

Since Tg(A) = (Ol Z n) 2 and the isomorphism type of the Dieudonne module D(A) doesn’t depend on A 
if p is unramified (see [GO, Thm 5.4.4]) we conclude that the orders Endo t (A;) are locally isomorphic at 
any prime. 

Given an Oz-embedding of Ok into R , the action of Ok will satisfy the Kottwitz condition automatically, 
because Ol does by assumption. The Rosati involution defined by any principal C^-polarization will 
induce complex conjugation on K. By [GL, Lemma 4.4.1] this gives an element of y(K) reducing to A. 

The problem is thus translated to showing the existence of an embedding of Ok into such an order R \iK 
satisfies certain conditions. Let R° denote the elements of reduced trace 0 in R and let Ar = R°r\(OL+2R)- 
This is an O^-lattice of rank 3 equipped with a positive definite O^-valued quadratic form N (which is 
just the restriction of the reduced norm on the quaternion algebra R ®o L T to Ar) 

N : Ar — > Ol, x t—> N(x ) =xx — —x 2 . 

Lemma 2. Let —m be a totally negative generator o/cIk/l- Then Ok ^ R if and only if m is represented 
by the ternary quadratic form N on Ar. 

Proof. We write Ok = 0£,[t] where t 2 + bt + c = 0 as in Lemma 1. If t = (—5 + yj—m )/2 is in R 
then i J—m = b + 2t £ Ar and its norm is m. Conversely, suppose that there is an element x £ Ar such 
that N(x) = to. This gives a map K —> Bp,L taking y/—m to x. We may write x = x\ + 2x2, where Xi £ 
Ol, X 2 £ R, and so the image of the element a = ~ Xl+ 2 ^~™ is in R, hence it is an integral element. 
That is, a £ Ok- We conclude that Ol[o\ C Ok- In fact, Ol[oi] = Ok because t — a £ LC l Ok = Ol- 
Since Ol[o\ C R, our claim follows. □ 

We shall use the following theorem of Cogdell, Piatetski-Shapiro and Sarnak [Cog] in the case of strict 
class number one. 

Theorem. Let q(xi, X 2 , X 3 ) be a positive definite integral ternary quadratic form over L. Then there is 
a constant C q such that if a is a totally positive square-free integer of Ol with NormTOQ^a:) > C q then a 
is represented integrally by q if and only if it is represented integrally locally over every completion of L, 
i.e., when Norm i /Q(a) > C q we have a = q(x\,X 2 ,X 3 ) for some a ;* £ Ol if and only if for every prime 
ideal p of Ol we have a = q(x i,p, £ 2 ,p, :E 3 ,p) for some Xi : p £ Ol p - 

Using this theorem one reduces to verifying that the norm N on A r represents to locally at every prime p 
of 0 L - We note that Ar®q l Ol p =A r®o l o l „ '■= {.R®O l Ol p ) 0 A(O Lp +2R®o l Ol p ) (cf. Propositions). 
Since all the orders R that arise are locally isomorphic, the isomorphism leaving the trace and norm 
unchanged, and the formation of the lattices commutes with completions, it suffices to deal with a single 
order R, which we now proceed to do. 

Let If be a supersingular elliptic curve and A = E Ol- As an abelian variety A is isomorphic 
to E 9 and its functor of points is canonically given by A(R) = E(R) Ol- It is thus a superspecial 
abelian variety with CU-action and, since it satisfies the Rapoport condition ( Te® % Ol,o = Te ,0 Gz Ol), 
it carries a unique principal Oi-linear polarization up to isomorphism, thus giving a point of SW(L). In 
this case R = O Ol, where O C B p oo is a maximal order identified once and for all with End(If) (see 
[Nic, Proposition 2.5.26.]). Set A o = O 0 f~l (Z + 20), where O 0 are the trace zero elements of O. In this 
case one can prove the following. 

Proposition 3. (i) Ar = Aq Ol and the norm form on Ar is the extension of scalars of the norm 
form on Aq>. 
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(ii) Let q be a prime ideal ofO l and 0 Rq the ring of integers of the completion L q of L at q. Let q = qflZ. 
Then Ar ®o l ®L q = A o ®z ®z q Ol q ■ 

(Hi) Ao®ifL q = (O®z^q) 0 n (Z q + 20®zZ q ) (namely, the construction of the lattice Aq commutes with 
localization). Moreover the norm form induced on Aq ®i Z 9 is none other than the norm form induced 
from B Pt00 ®q Qg. 

Proof, (i) The exact sequence of Z-modules 

o —► (z + 20 ) n o° — >o° —♦ e>/(z + 2 o) —► 0 

remains exact when tensored with the flat Z-module Ol- So 

A o®O l = ((Z + 20) n O 0 ) ®O l = ker [O 0 ® O l —♦ (O ® O l )/(O l + 20® O l )] 

= (0° <g> O l ) n ( O l +20® O l ) = R° n (O l + 2 R) = A R 

Part (ii) follows from (i). 

(iii) The same argument as for (i) works when tensoring the above exact sequence with the flat Z- 

module Z q . □ 

Picking a convenient model for O ®% Z q , we can now calculate Aq ®t Z q and its norm form explicitly, 
extend scalars to 0L q , and check that there are no local obstructions to representing m. We consider two 
cases. 


Case I: q| q,q p Outside of p and oo, B PiOC is unramified, so 

0®Z q 9* M 2 (Z,), 


where the reduced trace is the trace of a matrix and the reduced norm is the determinant of a matrix. So 

f a b 

. c —a} 


{0®1qY * 


: a,b, c £ Z, 


•q ( , 


and 


So 


and 


Z q — 


a 0 
0 a 


i a G Z q 


AO ®1 Tiq = (O ®1 Z q)° n (Z, + 20 ®z Tjq) = 


a 2b 
2c —a 


a.b.cG Z, 


i ( ’ 


A r ®o L ®l„ = 


a 2b 
2c —a 


: a, b,c £ 0 La 


The question of whether m is represented locally at q is now a question of whether m = — a 2 — 4&c, which 
is obviously the case. 


Case II: q|p Let Q p 2 be the unramified extension of degree two of Q p and Z p 2 its maximal order. In 


this case, we can verify using [Vig, Ch. II, Theoreme 1.1] that 


B, 


p ,OO 'o' 


a b 
—pb a a° 


: a, b £ Q p 2 , a = Frobenius > . 


This is a division algebra over Q p , whose trace and norm are in this model the trace and determinant of 
matrices. The algebra B PjCa ® Q p has a unique maximal order consisting of all the elements with integral 
norm [Vig, Ch. II, Lemme 1.5]. Therefore, the maximal order is 


O® Z p = 


a b 
—pb a a° 


: a,b £ Z p 2 j. , 
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and 


So 


(3.3) 


(O <8 Z p )° = 


—pb a a c 


a I : a + a a = 0 , a, b £ Z p 2 


Ao <g> Zp = (O <g> Zp)° n (Zp + 20 <g> Zp) 


a + 2a 2(3 

—2p(3 a a + 2a 

a~a G 2(3 

—2 p(3 a u a — a 


! a H - a a G — 0, a £ Zp, a, (3 £ Z p 2 


a, (3 £ Z „2 >. 


From this point we proceed by considering two possibilities. 


Write Zp 2 = Z p + ^/rZ p , where r is not a square modulo p. Then we can write down 
the following Z p -basis for the above collection of matrices: 


Case II a: p ^ 2 


ei 




e-2 



( ° 

\pVr 



Let p |p be a prime of Ol dividing p. Via the identifications in Proposition 3, this is also a basis for Ar 
over Ol v and we have 

N(xei + ye 2 + ze 3 ) = - rx 2 + py 2 - prz 2 , x,y,z £ 0 Lp ■ 

An application of Hensel’s lemma shows that since p ^ 2 and is unramified in L, m is represented 
by — rx 2 + py 2 — prz 2 over Ol p if and only if m is represented by — rx 2 over Ol p - This, in turn, is 

equivalent to —m/r being a square modulo p. Now, ^ j = (—1 )/(p/p) so m is representable if and only 

if = (— 1 )/(p/p). On the other hand, for p ^ 2 and unramified in K, we have (pp) = (— 

for one (or any) prime ‘Pip. We conclude that m is representable locally at a place p|p if and only 

if /(Wf) + f(V/p) is odd for a11 ^PIP- 


In this case we write Z 4 = T, 2 [x\/{x 2 + x + 1). The form N is now given by 

N ( (-2y/r a )) =-(a-Q ' 7 ) 2 + 8(3/3 a = 3b 2 + 8(3l3 a , a = a + bx, a, b £ Z 2 , (3 £ Z 4 . 

This is a ternary quadratic form over Z 2 and we want to find the conditions under which 

m = 3b 2 + 8(3(3 a , b £ 0 Lp , (3 £ Z 4 0 Lp . 

We first use Hensel’s Lemma mod p 3 (see for example [Lan, Ch II, §2]). Since p is unramified, m ^ 0 
(mod p) and one concludes that m is represented by N if and only if m = 3b 2 , b £ Ol p , and that holds if 
and only if to = 3 b 2 (mod p 3 ). Equivalently, 3 to is a quadratic residue modulo p 3 . 

3.1. Scholium. Condition (2) of Theorem A gives a necessary condition for superspecial reduction of the 
elements in S^{K). This condition should be compared with the results obtained in [Gor]. In fact, what 
our calculations show is that if K has “large enough” discriminant relative to p then the condition given 
in Part (2) is also sufficient for having superspecial reduction. Indeed, by these calculations, under the 
condition on the discriminant (which is not effective), one concludes that there is at least one abelian 
variety A with CM by Ok in characteristic zero having superspecial reduction modulo all primes above p. 
Since Hom(A, B) for two abelian varieties with CM by Ok always contains an element of degree prime to p, 
any abelian variety with CM by Ok will have superspecial reduction. The condition on “large enough” 
discriminant can in fact be removed; one knows that when a genus of Oi-integral positive definite quadratic 
forms represents an element m £ Ol everywhere locally then some form in the genus will represent to 
globally. See [Han, §2] and the references therein. 


Case II b: p = 2 
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4. Proof of Theorem B. 


There is a unique superspecial surface over F p , which can be taken to be E\ x E 2 for any choice of 
supersingular elliptic curves Ei. Elements of J75^(A) are distinguished by their principal polarization (up 
to isomorphism). Those, by a result going back to A. Weil, are given by the algebraic equivalence classes 
of divisors that are either two elliptic curves crossing transversely at their origin, or a non-singular curve 
of genus two (all up to automorphisms of the abelian variety). There is another description. 

Let A = E x E, where E is supersingular elliptic curve. Let A : A —» A v be any principal polarization. 
Recall that the Rosati involution on End(A), 1 —s- / A , is defined as 


where / v : A w 


f = A / A, 

A v is the dual homomorphism. The map from the Neron-Severi group, NS (A), 
NS (A) —♦ End (A), fj, A - V, 


identifies NS (A) with the A-symmetric elements of End(A); the polarizations correspond to the A-totally 
positive elements under this identification (cf. [Mum, pp. 189-190, 208-210], [IKO, §2.2]). If we choose 
the product polarization Ao, coming from the canonical identification of E with E v , and O = End(E), 
then the principal polarizations of A are the elements 

: s, t £ Z, s, t > 0, r £ O, st — rr v = 1 . 

We first consider a particular case. We take A = E 2 with the canonical polarization Ao- We then want 
to show that there is an embedding of Ol into the matrices 


n(A 0 ) := 


t \) :s,t£l,r£0\, 


if the discriminant dj, of L is large enough (these are the symmetric matrices with respect to the polarization 
we picked). Let n°(Ao) = {M £ II(Ao) : Tr(M) = 0} and let A(Ao) = n°(Ao) n (Z + 2II(Ao)). This is a 
rank 5 lattice that can be described explicitly: 


A(Ao) — 


2 “v -A : “ EZ ' r£ °l 


As in §3, one checks that to give an embedding of Ol into II(Ao) is equivalent to the quintic quadratic 
form q\ 0 given by a 2 + 4rr v representing d^ on A(Ao). Provided dz, 3> 0, this follows from the fact that 
the quaternary quadratic form rr v on O , a maximal order in _B Pj00 , represents any large enough integer. 


The general case. For every other polarization A we associate a rank 5 lattice A(A) with a quadratic form q\ 
that will represent dz, if and only if Ol embeds in the lattice 11(A) of A-symmetric elements of End(E 2 ). To 
show that q\ represents sufficiently large primitive discriminants, we need to show that there are no local 
obstructions, for which we shall argue that locally the quintic quadratic modules (A(A ),q\) and (A(Ao), q\ 0 ) 
are isomorphic. 


Take a matrix M = 

M2(B Pi oo) we let C V = 
M _1 A rV M. Let 



7- \ / X u \ 

^ 1 defining a principal polarization A. For any matrix C = ( “1 £ 

w v\ 

v I. Denote the Rosati involution defined by A as A~ 1 —> N x . Then N x = 


n(A) = {N £ M 2 (0) : N x = N}. 


By what we said above, the lattice 11(A) is isomorphic to NS (A) and so is a rank 6 lattice. We can 
view 11(A) as 11(A) <g> Q fl M 2 (0). We provide another description of 11(A). One may write M = H v H 
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for a suitable H G Af 2 (.B Pi00 ) (see [E, Prop. 4.2]). Consider the automorphism of the algebra M 2 (I? Pj00 ) 
given by TV i—> H~ 1 NH. We also denote this by 

N ^ = H~ 1 NH. 

If N v = N, i.e. N G n(A 0 ), then using the formula (CiC 2 ) v = , one finds that 

That is, c/)h(N) = H~ 1 NH is an element of n(A) <g> Q. We find that the rank 6 lattice n(A) is given by 

n(A) = Mn(Ao)®Q)nM 2 (0), 

and so we define a rank 5 lattice 


n°(A) = <Mn°(A 0 ) ®Q)n m 2 (o), 


and a slightly smaller rank 5 lattice 

A(A) =n°(A)n(z +211(A)). 


The definition of these lattices is independent of the choice of H such that M = H v H. To see that, one 
first reduces to the case of M = I, the identity matrix, so that H satisfies I = H v H 1 i.e. is a rational 
automorphism of the polarization Ao. We remark, though this is not needed for our argument, that for 
any H one has H -1 = (H v 77) _1 iJ v , and for V-symmetric matrices ) the inverse is given by the 

usual formula ^ JO ( -xh ~xY ) • The lattice n(A) <g> Q, according to the definition, now consists 

of matrices H~ 1 NH = H V NH for which N v = N , but it is easy to see that these are again just the V- 
symmetric matrices. That is, n(A) is well-defined under our procedure. Next we consider n°(Ao). Remark 
that under the Uadic representation on TfrE) Qt, j ■ B P}OC M 2 (Q^), we have Tr(ar) = Tr(j(a;)). On 
the other hand, B P:0 c , being a finite dimensional Q-algebra, has an intrinsic trace Tr coming from the left 
regular representation on itself, and one has Tr ; = 2Tr. Using this it is not hard to see, making use of the £- 

adic representation, that the intrinsic trace Tr r of an element ( a \\ G M 2 (R p . 0O ) is just 4Tr(a) + 4Tr(d). 


We conclude that the function 



Tr(a) + Tr(d) is invariant under conjugation 


because Tr / obviously is. Since n°(Ao) can be described as the V-symmetric matrices N with Tr (N) = 0, 
we conclude that its definition is indeed independent of the choice of H , i.e. <(># (n°(A 0 )) = n°(A 0 ) if 
H w H = I. Note that this argument also gives a more natural definition of the lattice n°(A) as the integral 
A-symmetric matrices of Tr equal to zero and our ad hoc definition is just more convenient for the purpose 
of our proof. 


Lemma 4. Let L = Q (y/~D), D > 0 square-free, be a real quadratic field with discriminant d l- 

(1) To give an embedding of L into 11(A) ®Q is equivalent to giving an element C of n°(A)®Q whose 
degree as a rational endomorphism is deg C = D 2 . 

(2) To give an embedding of Ol into 11(A) is equivalent to giving an element of A(A) whose degree as 
an endomorphism is df L . 

(3) Define 

q x : A(A) Z, qfrC) = y/d^iM- 

The function q x is a quintic integral positive definite quadratic form and to give an embedding 
of Ol into 11(A) is equivalent to representing —dL by q x . 


Proof. The whole issue is to map frlj to an element C G n(A) ® Q that will satisfy C 2 = Dfr. Composing 
with 4>Jf, one verifies that the condition is that Tr(Ci) = 0 and det(C'i) = —D, where C\ = 

(writing the condition in 11(A) ® Q is more complicated; see §4.1). However, for matrices C\ = 
we have that deg(Ci ) 2 = deg(C 2 ) = deg ( S +„ r7 2 v^) = (s 2 +rr v ) 4 = det(Ci ) 4 and so deg(C'i) = 

\ U S i - TV J 





10 


EYAL Z. GOREN & KRISTIN E. LAUTER 


D 2 . However, we have deg(Ci) = deg(C) (for the natural extension of the degree map to rational isogenies). 
Note that this implies that the map L —■> n(A) (g) Q gives a map Z[\/ZA] —> n(A) if and only if C £ n°(A) 
and deg(C') = D 2 . 

One now considers the conditions that actually guarantee that \/D, or 1+ (as the case may be), are 
in M 2 ( 0 ). The second part follows. 

On n°(A 0 ) we have q\ 0 T = s 2 + rr v , which is visibly a quintic positive definite quadratic 

form. Since q\(C) = q \ 0 (cpjj 1 (C)) on $#(n°(A)) it follows that it too is a quintic positive definite rational 
quadratic form. The identity q\{C) = -\/deg(C') implies that q\ is in fact integral. □ 

According to Lemma 2.4 of [IKO], given a matrix M £ GL 2 ( 0 ) and a prime q we can find a matrix H = 
H(q) £ GL 2 ( 0 g ) such that M = H y H. That means that locally the lattices A(A) and A(Ao) are conjugate 
by the map <f>H■ It follows from our definitions that the quadratic modules (A(X),q\) and (A(Ao),<?a 0 ) 
are in the same genus. Therefore, verifying the local representability conditions for q\ reduces to the case 
of q\ 0 which was already considered. 


4.1. Scholium. One can give another explicit description of the lattices A(A) and the conditions for 
embedding Ol in them. For simplicity we only describe n(A) and the conditions for embedding Z [VD\ 

define the principal polarization A. The elements of n(A) are the matrices N = 


in it. Let M = 


,a,/3,j,S £ O such that 


a 0' 

7 <5, 

(4.1) sa + ry £ Z, r v /3 + tS £ Z, a v r + y v f = s(3 + r5. 

The conditions for N 2 = D ■ I 2 are 

(4.2) aP = ~PS , 7 a = —Sj 

and a 2 + P'y = 5 2 + 'yP = D , which reduce given (4.2) to one condition: 

(4.3) a 2 + P'y = D. 

As noted, the matrices satisfying (4.1) are a rank 6 lattice over Z. In fact the last equation can be written 

PP y + (m ') 2 


in the form 


a + /?7 = 


t 2 


where m! = (3 + t5 G Z. 
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